diff --git a/CHANGELOG.md b/CHANGELOG.md index d268b49bc8..e01d24a15c 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,12 @@ # Nokogiri Changelog +## 1.10.8 / 2020-02-10 + +### Security + +[MRI] Pulled in upstream patch from libxml that addresses CVE-2020-7595. Full details are available in [#1992](https://github.com/sparklemotion/nokogiri/issues/1992). Note that this patch is not yet (as of 2020-02-10) in an upstream release of libxml. + + ## 1.10.7 / 2019-12-03 ### Bug @@ -23,6 +30,7 @@ * CVE-2019-13117 * CVE-2019-13118 * CVE-2019-18197 +* CVE-2019-19956 More details are available at #1943.